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ARTICLE TRACKING SYSTEM 
Background of "the Invention 
The invention relates to Radio Frequency 
5 Identification (RFID) systems and, particularly, to an 
RFID system designed to continuously track articles and 
personnel as they move through buildings. 

RFID products typically have three components: (1) 
a tag (the item being identified) , (2) an interrogator (a 
10 device which detects the presence of a tag) , and (3) a 
system (typically including cabling, computers, and 
software which tie together the tags and interrogators 
into a useful solution) • RFID products are typically 
designed to detect tags when they pass within range of a 
15 few fixed or handheld interrogators. 

RFID systems are usually deployed as high-end 
replacement technology for bar coding. RFID and related 
systems include passive RFID systems, active RFID 
systems, infrared ID systems, and Electronic Article 
20 Surveillance (EAS) systems. 

The tags in a passive RFID system do not carry on- 
board power. The interrogator in such systems transmits 
operating power for the tags. Such systems generally 
have a detection range of a meter or less, although 
25 somewhat longer ranges have been achieved. Typically, 
these systems operate in the 125-kilohertz radio band. 

Most passive RFID systems work as follows. An 
interrogator emits an electromagnetic field for the 
purpose of powering the tag. A coil in the tag is 
30 powered by the electromagnetic field, causing the tag's 
circuitry to "wake up." The tag uses this power to send 
an identifying signal back to the interrogator. 

Although most passive RFID systems are read-only 
(that is, the tags in such system respond to a query by 
3 5 reading information from their memory and sending the 
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information back to the interrogator) , the tags used in 
some passive RFID systems have a limited ability to 
accept information and instructions from the 
interrogator, for example read/write capabilities in 
5 smart cards (electronic money) and "electronic manifests" 
in industrial applications. 

Passive RFID tags have been employed in 
conjunction with access control, smart cards, vehicle 
identification (AVI) , waste management, item tracking, 

10 animal identification, manufacturing control, materials 
handling, and a variety of other purposes. 

One fundamental design goal of any RFID system is 
for the weak signal emitted from the tag to be 
distinguishable from the much stronger signal emitted by 

15 the interrogator. Some strategies for doing this 
include: 

Frequency shifting. Circuitry in the tag receives 
a carrier from the interrogator, translates the signal to 
another frequency, and emits a response modulated onto 
20 that second frequency. 

Half duplex operation. The tag is charged by the 
interrogator. When the interrogator's charging circuit 
turns off, the tag uses the stored power to respond. 

Modulated backscatter. The tag modulates its 
25 antenna cross section to identify itself to the 
interrogator. 

Delayed retransmission. Surface acoustic wave 
(SAW) devices retransmit the interrogator's carrier after 
a delay. The tag's identity is indicated by time 
30 variations in the delayed response. 

Active RFID systems require battery-powered tags. 
The battery permits a longer detection range of between 3 
and 100 meters. These systems are capable of locating 
tags with higher accuracy than passive RFID systems and 
35 typically operate in the 400, 900, or 2440 megahertz 
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bands. Active tags tend to enable multiple tags to be 
within range of an interrogator by the use of 
"handshaking " between the tags and interrogator, so that 
each tag transmits its signal in turn. Communication 
5 between tag and interrogator in active RFID systems is 
also typically faster than with passive tags. 

Most active RFID tags respond to the interrogator 
when polled, in accordance with a communications 
protocol. Some active RFID tags "chirp" (transmit) a 

10 signal spontaneously at predetermined intervals. A tag's 
chirped signal is detected by the interrogator if the tag 
is in range of the interrogator. 

Infrared systems (IRID) , while not RFID systems, 
also endeavor to detect and identify the position of 

15 mobile tags. A typical IRID system includes a tag that 
chirps its identity at randomized intervals. Infrared 
readers located in the ceiling detect these 
transmissions, and report them to a host. The 
transmission rate from the tag to reader is typically 

2 0 about 600 baud. Motion detectors in the tags enable the 
tags to transmit more frequently when in motion. The tags 
are typically about the size of dominos. 

EAS systems are intended to deter theft in retail 
environments. EAS tags are fairly unreliable, very low 

2 5 in cost, and limited in capabilities. Although they 

track mobile tags, they are not generally considered to 
be RFID products, because EAS tags are uncoded and cannot 
be distinguished from one another. 

Summary of the Invention 
30 A system for tracking mobile tags includes cell 

controllers with multiple antenna modules which generate 
a carrier signal received by the tags. The tags respond 
by transmitting identification codes at randomized 
intervals, the codes being modulated onto the carrier 
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signal. The antenna modules located, for example, in the 
ceiling, receive the responses and send them to a cell 
controller, which processes them and uses them to 
calculate tag locations by proximity and triangulation 
5 techniques. The distance of a tag from a particular 

antenna module is calculated by measuring the round trip 
signal time. The cell controllers send processed data 
derived from the received signals to a host computer. 
The host computer collects the data and resolves them 
10 into positional estimates. The host computer archives 
data in a data warehouse, such as an SQL Server. 

Among the advantages of the invention are one or 
more of the following. 

One advantage of the invention is that it is 
15 designed to remain in constant communication with the 
tags while covering a complete facility. The system is 
able to identify and calculate the location of tags even 
in the presence of severe multipath effects. 

Another advantage of the invention is that it uses 
20 tags with low power consumption requirements, allowing 

the lifetime a powered tag to approximate the lifetime of 
the tag battery itself. Furthermore, tags can enter a 
low-power mode when not in use, thereby further 
conserving power. 
25 Another advantage of the invention is that it is 

scalable. A small number of widely-spaced antenna 
modules can be used to roughly locate tags within a 
facility. If a more accurate tag location is desired, 
additional antenna modules can easily be added to the 
3 0 system. Furthermore, new tags can be added to the system 
without requiring any system re-configuration. 

Another advantage of the invention is that it 
mitigates problems caused by the collision of tag 
signals. Because tags spontaneously wake up and "chirp" 
3 5 on a randomized basis, multiple tags are unlikely to 
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transmit signals simultaneously. Furthermore, in some 
circumstances the system is able to predict when tag 
signal collisions will occur and respond accordingly* 

Another advantage of the invention is that tags can 
5 respond to multiple cell controllers simultaneously. 

Other features and advantages of the invention will 
become apparent from the following description and from 
the claims. 

Brief Description of the Drawings 
10 FIG. 1 shows an overview of a system configured 

according to the invention. 

FIG. 2 shows several cell controllers deployed in a 
multi-story building. 

FIG. 3 is a block diagram of a tag RF design 
15 according to the invention. 

FIG. 4 is a block diagram of an alternative 
embodiment of a tag. 

FIG. 5A-5G are diagrams of a signal as it passes 
through various stages of the system. 

2 0 FIG. 6 is a block diagram of the cell controller RF 

design. 

FIG. 7 is a block diagram of a cell controller 
active antenna module. 

FIG. 8 is a block diagram of a modulator RF design. 
25 FIG. 9 is a block diagram of a cell controller cable 

extender module. 

FIG. 10 is a block diagram of a cell controller. 

FIG. 11 illustrates extraction of tag data from a 
series of correlations. 

3 0 FIGs. 12A-C are diagrams of tag datagrams. 

FIG. 13 shows a tag incorporating a delay element. 
FIG. 14 shows several cell controller receive chains 
operating in parallel. 
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Detailed Description 
Referring to FIG. 1, an article tracking system 100 
contains the following general components: 

Tags: Inexpensive miniature radio frequency 
5 transponding tags lOla-c are attached to people and/or 
items being tracked. Tags lOla-c "wake up" periodically, 
and "chirp" (transmit) a radio-coded unique identity code 
(UID) . The tags lOla-c are designed so that their range 
is 15-30 meters in a typical indoor environment, the 
10 range mostly being limited by a need to conserve the life 
of the tag battery, and the requirement that the tag 101a 
and tag battery be small and thin. 

Cell Controllers: Cell controllers 102a-c detect 
the chirps of tags lOla-c and calculate the distances of 
15 those tags lOla-c to active antenna modules 104 a-d 

connected to the cell controllers 102a-c. Each antenna 
module preferably has a transmit antenna and a receive 
antenna. In FIG. 1, the antenna modules connected to 
cell controllers 102b and 102c are omitted for 
20 simplicity. A cell controller 102a is typically 

contained in a case and is mounted behind a hung ceiling. 
The cell controller 102a can receive power from a 
conventional wall outlet or the equivalent. The cell 
controller 102a is attached through coaxial cables I03a-d 
25 to the antenna modules 104a-d, respectively, which 

provide coverage of an area of the indoor facility 110. 
A tag signal 107, transmitted by a tag 101a, is received 
by one or more antenna modules 104a-d, and is processed 
by chips in the cell controller 102a, such as digital 
3 0 signal processing (DSP) chips. The information resulting 
from this processing is used to identify both the 
identity of the transmitting tag 101a and the distance 
between the tag 101a and each, for example, of the 
receiving antenna modules 104a-d. 
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Host Computer: Cell controllers 102a-c are in data 
communication with a host computer 105, which collects 
data and information available from the cell controllers 
102a-c and archives the data into an open format 
5 database, such as an SQL Server. 

User Application: In a preferred option, client 
workstations 120a-c communicate with the host computer 
105 over a network, such as a LAN 115. A client 
application running on each of the client workstations 

10 120a-c can access the SQL Server and presents the data in 
a way that is useful to an end-user. 

The tag 101a does not generate its own radio signal. 
Rather, an antenna module, for example antenna module 
104a, continuously transmits a direct sequence spread 

15 spectrum interrogator signal 106 at a first frequency, 
for example 2440-megahertz. The tag 101a receives this 
signal 106, modulates its UID code onto the signal 106, 
and immediately transmits back a frequency-shifted signal 
107 at, for example, 5780-megahertz to, for example, 

2 0 antenna 104a. The distance from the antenna module 104a 
to the tag 101a can then be determined by the cell 
controller 102a from the round trip time of transmission, 
accounting for fixed and known delays in the wiring and 
electronics. The cell controller 102a can quickly switch 

2 5 among antenna modules 104a-d to obtain the distance from 

the tag 101a to each of antenna modules 104a-d (which 
receive the return signal 107) , and from that information 
determines the tag's location by triangulation 
techniques. 

3 0 The system 100 is designed to be scaleable, allowing 

addition of cell controllers to existing cell controllers 
102a-c and antenna modules to existing antennas modules 
104a-d to improve the precision with which tag location 
is determined. FIG. 2 shows how a collection of cell 
3 5 controllers 102a-c can be deployed in the large 
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multistory building 110. As shown in FIG. 2, multiple 
cell controllers I02a-c feed data to a single host 
computer 105, typically through a TCP/IP communications 
network. The use of TCP/IP is not required for system 
5 operation, and a variety of data protocols and transfer 
mechanisms can be used. For example, if a local area 
network is not available, connection to the host can be 
accomplished via RS485, RS232, RS422, power line modem, 
or a dedicated phone line. Alternatively, specialized 
10 modems designed for use on such cables can be employed. 

Each of the cell controllers 102a-c can be installed 
to cover a separate floor 130a-c, respectively, with the 
exact configuration being modifiable by a system 
administrator. On floor 130a, cell controller 102a, with 
15 its collection of antenna modules 104a-d, is installed in 
the ceiling 140a. The same configuration of equipment is 
used on the remaining floors 13 0b-c. Antenna modules 
104a-d are designed to provide good gain downwardly and 
horizontally, and poor gain upwardly, so that a vertical 
20 location (that is, the floor) of a tag 101a can be 

determined by noting which antenna modules 104a-d receive 
the strongest signals from the tag 101a. Structurally, a 
ground plane is placed behind each antenna to reflect 
signals downward. The horizontal location of a tag 101a 
25 is then roughly determined by noting which antenna 

modules 104a-d receive a strong signal from the tag 101a. 
The horizontal location of the tag 10 la with respect to 
an antenna module 104a can be determined more precisely 
by estimating the distance from the tag 101a to each 
30 antenna module 104a-d, based on the combined time of 

flight of the interrogation signal 106 and the tag signal 
107. Each "cell," consisting of a cell controller 102a 
and its antenna modules 104a-d, covers several thousand 
square feet of floor space. Each cell operates 
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independently, enabling more cells to be added without 
affecting the performance of existing cells. 

If a user desires to locate tags by "zone," one 
antenna per zone can be installed. Users wishing to 
5 track one or more tags lOla-c moving down hallways, can 
install antenna modules 104a-d every 2 0 or so meters 
along a hallway 130a-c, and calculate the linear location 
of a tag 101a by measuring the distance from the tag 101a 
to those antenna modules 104a-d. Customers wishing to 

10 triangulate upon the location of a tag 101a must install 
enough antenna modules such that the tag 101a will be in 
range of at least three of the antenna modules. A 
typical installation will cover a complete facility 110 
with a combination of "zone" and "hallway" coverage at a 

15 relatively low cost per square foot, and, over time, 
upgrade certain areas with enough antenna modules to 
triangulate upon a tag's position. 

Tag RF Design 

Referring to FIG. 3, a tag RF circuitry 300 receives 

2 0 signal 106 at a tag receive antenna 3 01 and transmits tag 
signal 107 at a tag transmit antenna 312. The function of 
the tag RF circuitry 3 00 is to transpond the incoming 
spread spectrum signal 106 by frequency translation. The 
secondary function of the tag RF circuitry 3 00 is to 

25 modulate tag data onto the emitted tag signal 107, under 
the control of a microprocessor 308. The information 
emitted on the tag signal 107 includes, in a preferred 
embodiment of the invention, the serial number of the 
tag, datagram headers, and tag data 3 09 such as that 

30 derived from a motion indicator or a low power indicator. 
The incoming signal 106 is preferably a direct 
sequence spread spectrum signal, biphase or quadrature 
modulated from the cell controller 102a, in the 2440 
megahertz band. The signal 106 is received by the tag 
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receive antenna 3 01, which collects the signal 106 and 
feeds it into the tag RF circuitry 300. 

After the signal 106 is received by the tag receive 
antenna 301, an Rx (receive) bandpass filter 302 ensures 
5 that the tag is receiving signals only in the 2440 

megahertz ISM band, rejecting radar signals, electronic 
newsgathering signals, and the like. In one embodiment, 
the filter 3 02 is implemented as an etched coupled 
stripline filter embedded in the circuit board. The 

10 signal 106 is then amplified by an amplifier 303 to 
ensure that the received signal can be mixed, in a 
frequency mixer 304, without degrading the signal to 
noise ratio (SNR) . 

The frequency mixer 304 translates or shifts the 

15 carrier frequency from 2440 megahertz to 5780 megahertz. 
The incoming signal, with a center frequency of 2440 
megahertz, is mixed with the output of a phase locked 
oscillator (PLO) 3 05 with a center frequency of 3 340 
megahertz. This results in a sum frequency of 5780, 

2 0 along with a difference frequency and a variety of 

harmonics and subharmonics which are removed with a 
bandpass filter 306. In one embodiment, the PLO 305 
consists of a phase locked loop (PLL) chip with three 
inputs: (1) a sampled output from a voltage controlled 
25 oscillator (VCO) ; (2) a reference tone from a 10 

megahertz oscillator; and (3) a frequency programming 
interface to a microprocessor 3 08. This generates a pure 
tone with good phase noise at the 3 3 40-megahertz tag LO 
frequency. In an alternative embodiment, the PLO 305 

3 0 outputs a 1670-megahertz tone, which is then doubled to 

give the desired 334 0-megahertz result. 

The next element of the tag RF circuitry 300 is a 
biphase modulator 307 which, under control of the 
microprocessor 308, can either pass the 5780-megahertz 
35 signal unaltered, or change the phase of the signal by 
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180 degrees. The modulator 3 07 is implemented as a 
single pole double throw RF switch 801 that feeds a 180 
degree hybrid, as shown in FIG. 8. Several forms of 
modulation can be used, including on-off keyed (OOK) 
5 modulation, binary phase-shift keyed (BPSK) modulation, 
multiple phase-shift keyed (MPK) modulation, and 
quadrature amplified (QAM) modulation. BPSK is the 
preferred form of modulation. The output from the 
modulator 3 07 is fed into an amplifier 310, then is 

10 filtered by a transmitter bandpass filter 311, and the 
output of filter 311 is emitted from a transmit antenna 
312 as the tag signal 107. Since the amplifier 310 
operates at high frequency, it consumes significant 
power, and alternative embodiments (such as that shown in 

15 FIG. 4) that make this amplifier 310 unnecessary are % 
preferred. The Tx Filter 311, implemented as a 5-pole ~ 
filter, is necessary to ensure tag compliance with FCC 
Part 15 requirements. 

The tag RF circuitry 300 shown in FIG. 3 is intended 

20 to illustrate the general functions of a tag lOla-c, with 
an embodiment that is workable and self-explanatory. 
Those skilled in the art will be able to combine multiple 
functions into single elements in order to conserve power 
and take full advantage of available parts, or implement 

2 5 the same functions with a custom ASIC. FIG. 4 shows an 

alternative embodiment 400 which fulfills the same basic 
functions as that shown in FIG. 3 , but with fewer 
components and using less power. The essential 
difference between the circuitry 400 shown in FIG. 4 and 
30 the circuitry 3 00 shown in FIG. 3 is that the modulator 
404 in FIG. 4 is placed before the frequency mixer 4 06 in 
order to reduce the number of components (for example, 
the amplifier 310 is eliminated) and to conserve power. 

In the place of the frequency mixer 304 (FIG. 3) or 

3 5 the time delay element 1505 (FIG. 13) , other signal 
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transmission discriminators may be used to transpond by 
other methods. For example, a tag, such as the tag 101a, 
can transpond using backscatter, frequency translation by 
mixing, frequency translation by taking a harmonic, 
5 frequency translation by taking a subharmonic, or by 
signal delay (such as via a SAW device) . 

Not shown in FIG. 4, but desirable for the tag RF 
circuitry, is the use of a common crystal reference for 
both the PLO 407 and clock timing in the microprocessor 

10 405. Accurate timing is an important, if not critical, 
feature of the system, enabling the cell controllers 
102a-c to predict when a tag 101a will transmit a tag 
signal 107. Using the same crystal reference in the PLO 
407 and in the microprocessor 405 clock timing allows the 

15 cell controller 102a to accurately calibrate the source 
by measuring phase shifts in the received signal (as 
described hereinafter) , and to synchronize its clock 
timing accordingly. 

Not shown in FIG. 4, but desirable for some 

2 0 applications, is an embodiment where the transmit antenna 
409 and receive antenna 401 are combined into a single 
element, and which uses a diplexer with the single 
antenna structure . 

The manner in which the tags lOla-c are powered 

2 5 depends on the application. (Note that FIGS. 3 and 4 
omit the tag power source.) Typically, a tag 101a will 
be battery powered, with the RF stage turned on and off 
under control of the microprocessor 405. In a preferred 
embodiment, the microprocessor 405 goes into a low power 

30 state, where it merely waits until it is time to power up 
the tag 101a again. In an alternative embodiment, all 
tag circuitry 400 cycles on and off under analog control, 
using an RC time constant in the circuit 400 as the 
timing source . 
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Using the tag RF circuitry 300 or 400 of FIGS. 3 or 
4, if a tag 101a is in range of two of the cell 
controllers 102a-c, and those cell controllers are 
sending pseudonoise with low cross correlation 
5 characteristics, the tag 101a will correctly transpond 
both signals simultaneously. 

Tags lOla-c require a period of time, on the order 
of a millisecond, to charge up and charge down. During 
these brief periods, typically, the tags lOla-c will not 

10 be stable enough to use, but will nonetheless emit RF 

into the radio channel through the transmit antenna 409. 
For high-performance applications, where radio bandwidth 
is limited, a microprocessor-controlled switch can be 
added to the tag's transmit chain to eliminate such 

15 spurious emissions. & 
The tag RF circuitry 3 00, 4 00 shown in FIGS. 3 and 4 & 
can be used in conjunction with different pairs of 
frequencies. The general approach described above works 
for any two allowable FCC spread spectrum bands. For 

2 0 example, the following combinations are permissible for 
license-free radio under FCC regulation Part 15.247: 



5780 megahertz translated to 2440 megahertz. 
Spread spectrum operation, however, is not required; 
two licensed narrow bands can be used. However, spread 
spectrum operation in the 2440 and 5780 megahertz bands 
3 0 is assumed for the remainder of the discussion. 

Tag With Time Delay 

The tag RF circuitry 300, 400 shown in FIGS. 3 and 4 
use frequency division multiple access, i.e., the tag 
circuitry 3 00, 400 receives and emits signals on 



25 



915 megahertz translated to 244 0 megahertz. 
915 megahertz translated to 5780 megahertz. 
2440 megahertz translated to 915 megahertz. 
5780 megahertz translated to 915 megahertz. 
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different frequencies. An alternative embodiment 1500 
uses time division multiple access, as shown in FIG. 13. 
For illustrative purposes, assume that the tag circuitry 
1500 shown in FIG. 13 takes as an input at a receive 
5 antenna 1501 a signal at one frequency, such as 9l5mHz, 
and emits the same signal through a transmit antenna 1508 
at the same frequency after a delay of a microsecond. 
Assume that a cell controller, such as cell controller 
102a, transmits an interrogation signal 106 in bursts 

10 every 2 microseconds. A tag, such as tag 101a, takes 

this signal as an input through the receive antenna 1501. 
The signal then passes through elements 1502-1504, as in 
FIGS. 3 and 4. A time delay element 1505 is then used to 
delay for a microsecond. The signal then passes through 

15 a transmit bandpass filter 1507 and is emitted from the 
transmit antenna. A SAW device can be used as the time 
delay element 1505. During the period of the delay, the 
cell controller ceases transmission, and reflections of 
the interrogation signal 106 in the environment die down 

20 to a minimal level. This half-duplex approach allows 

single frequency operation, although with lower bandwidth 
than with a full-duplex frequency shifting approach. As 
in the frequency-changing tag, the delay-based tag is 
capable of modulating the response signal by a 180-degree 

25 phase shift. In other respects, the tag design 1500 

shown in FIG. 13 is similar to those shown in FIGS. 3 and 
4. 

Cell Controller RF Design 

FIG. 6 shows the radio stage of a cell controller 
30 102a. The architecture of an antenna module, such as the 
antenna module 104, is shown in FIG. 7. Together, the 
cell controller 102a and its remote antenna modules 104a- 
d modulate a baseband square wave input onto a 2440- 
megahertz carrier, filter the resulting 2440 megahertz 
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signal to comply with FCC transmission requirements, 
transmit that filtered 2440-megahertz signal through a 
selected antenna module, receive a returning 5780- 
megahertz tag response through the same antenna module, 
5 extract the I (Inphase) and Q (Quadrature) components of 
the demodulated baseband signal, and digitize the result 
for subsequent processing. 

FIG. 10 shows the main components of the cell 
controller digital subsystem 650. In summary, the 

10 digital subsystem 650 provides a baseband input signal 
601, and some number of nanoseconds later receives a 
demodulated response 107 from a tag 102a. The 
microprocessor 1001, as noted above, can change the 
behavior of the radio system by (a) modifying the 

15 baseband input signal 601; (b) modifying the chip rate, >* 
pseudonoise sequence length, and/or the pseudonoise 
sequence code; (c) modifying the transmit frequency 610 
of radio transmitter 1002 and the receive frequency of 
radio receiver 1003 within a narrow range; (d) modifying 

2 0 the transmit gain of radio transmitter 1002 and the 

receive gain of radio receiver 1003; and (e) by switching 
antenna modules 104a-d. 

The demodulated response 107 from the tag 102a is 
split into I (Inphase) and Q (Quadrature) components by 
25 the receiver Radio 1003, and digitized by a digitizer 
636. An integer DSP processor 1004, for example a TMS 
320C54, reduces the output from the digitizer 636, 
performing correlation operations at high speed. If 
binary phase-shift keyed (BPSK) modulation is used on the 

3 0 transmitting side, the I and Q channels are correlated 

separately and combined. For quadrature phase-shift 
keyed (QPSK) modulation, each channel must be correlated 
twice, once with each sequence. The correlated data from 
the integer DSP 1004 is processed by a microprocessor 
3 5 1001, such as a Pentium processor. For cost savings and 
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higher performance, a less powerful x86 processor, and a 
floating point DSP processor such as a TMS 32 0C3 0 can be 
used. Communications between the microprocessor 1001 and 
the host computer 105 is accomplished using a TCP/IP 
5 protocol, with Ethernet being preferred. 

The data that is input to the transmit chain is a 
baseband input signal 601 which is a pseudonoise 
spreading sequence. The length of the sequence and the 
code encoded in the sequence are set by a cell controller 

10 microprocessor 1001, and can be varied depending on 

signal processing requirements. Thirty-one or 127 bit 
sequences are typical, giving about 15 dB and 20 dB of 
compression gain, respectively. The 2440 megahertz and 
5780 megahertz bands can support a 40 megahertz baseband 

15 input signal 601, and the cell controller 102a is 

designed to enable this full bandwidth to be utilized. 

FIGS. 5A-5G show an interrogation signal 106 as it 
passes through various stages of the cell controller RF 
circuitry 600. FIG. 5A shows a square wave baseband 

20 input to the modulator 500. FIG. 5B shows this baseband 
input digitally correlated 510. FIG. 5C shows an output 
520 from a modulator 602, viewed through a spectrum 
analyzer centered at 244 0 megahertz. FIG. 5D shows a 
spectrum analyzer view 530 of the tag signal 107, 

2 5 centered at 5780 megahertz. FIG. 5E shows the 

demodulated response from tag 107, separated into its I 
(Inphase) 545 and Q (Quadrature) 540 components. FIG. 51 
shows the I and Q components, digitally correlated 550. 
FIG. 5G shows the negative of the second derivative of 

3 0 the correlated waveform, combinging the I and Q 

components 560 . 

The modulator 602 (FIG. 6) modulates the baseband 
input 601 onto a 2440 megahertz carrier. Various forms 
of modulation are available and well-known to those 
35 skilled in the art. For BPSK modulation, the modulator 
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602 is implemented as a single pole double throw RF 
switch 801 that feeds a 180-degree hybrid combiner 803, 
as shown in FIG. 8. The modulator 602 is preferably 
implemented as a QPSK modulator, which duplicates the 
5 BPSK modulator with one channel offset by 90 degrees from 
the other, each channel driven by a different baseband 
sequence with acceptable cross-correlation 
characteristics. Higher order modulation is also 
possible. Modulation by the modulator 602 results in 

10 sidelobes extending for hundreds of megahertz, which need 
to be filtered to comply with FCC requirements. The 
244 0-megahertz band has an adjacent band, which imposes 
very strong filtering requirements, best addressed using 
in the illustrated embodiment using a SAW filter 607 that ** 

15 combines wide passbands with tight stopbands. A wider 
passband supports a faster chipping rate in the baseband 
input signal 601, but a narrower passband provides an 
opportunity to use a wider range of frequency diversity 
to avoid jammers and/ or support advanced signal 

2 0 processing techniques. The modulator 602 must operate at 
the same frequency as the available IF filter 607, 
typically in the range of 2 00 megahertz to 400 megahertz. 
A preamplifier 606 is necessary prior to the SAW IF 
filter 607, and the output of the filter needs to be 

2 5 amplified by an amplifier 608. 

A transmit IF oscillator 605, like all other RF 
oscillators in the cell controller circuitry 600, is 
phase locked to a 10 megahertz crystal source 603, which 
is distributed through a filter and splitter network 604 
30 to each of the oscillators. The 10 megahertz source 603 
needs to be within a few kilohertz of the 10 megahertz 
sources on the tags to avoid excessive baseband phase 
shift. 

The output from the IF filter 607 (from amplifier 

3 5 608) is then mixed by a mixer 609 with the output from a 
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phase locked oscillator (PLO) 611 and is converted to a 
carrier frequency of 2440 megahertz. The frequency of 
the PLO 611 can be modified within a narrow range under 
microprocessor control 610, in order to provide the 
5 frequency diversity needed to avoid jammers and/or for 
various advanced signal processing techniques. The 
degree of frequency diversity available is related to the 
specifications of the IF filter 607, with narrower 
filters permitting a slower chip rate but having more 
10 frequency flexibility. Not shown in FIG. 6 is a filter 
typically needed to remove undesirable harmonic and 
difference frequencies from the output of the mixer 609. 

Following the mixer 609 is a driver amplifier 612 
which raises the power level of the signal 106, so that 
15 it can be driven down the cable 103a to the remote 

antenna module 104a, and which buffers the output of the 
mixer 609 for a bandpass filter 613. The RF bandpass 
filter 613 is needed to remove FCC non-compliant outputs 
from the mixer 609. A directional coupler 616 provides a 
20 port to examine the signal 106 before it is transmitted 
to the remote antenna modules, for example antenna 
modules 104a-d. 

An attenuator 614 under microprocessor control 615 
allows the signal processing software to decrease output 
2 5 power when a tag lOla-d is known to be nearby. This is 
helpful in circumstances when a nearby tag is known to be 
over-driven by the cell controller, and/or the signal 
processing software needs the tag to operate in a more 
linear range. 

30 The signal is then fed into a diplexer 618, which 

combines the transmitted 106 and received 107 signals 
onto a single wire. The diplexer 6l8 is a 
highpass/lowpass filter combination 619a that attenuates 
a received signal 107 relative to the transmit side and 

35 attenuates the transmit signal 106 relative to the 
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receive side. Because of the presence of the Tx and Rx 
bandpass filters 613, 624 , the specifications of the 
diplexer 618 are not very stringent. 

The cell controller RF stage 600 shown in FIG. 6 
supports one remote antenna module 104a-d at a time. In 
order to support multiple antennas from the same cell 
controller, the system needs a switch 619, which enables 
a microprocessor control 62 0 to rapidly switch from one 
antenna to the next. The switch 619 takes RF and passes 
it into one of n cables, where n is, for example either 8 
or 16. The switch 619 also provides DC power to the 
selected line. The RF signal is coupled into the cables 
with a capacitor (not shown) , which provides DC 
isolation, and the DC power is coupled into the cables 
with RF chokes to provide RF isolation. Thus, the DC and " 
RF travel together through a single coaxial cable to the - 
selected antenna. 

The rise time of the DC in an antenna is in the 
range of 100 microseconds, limited by the effective 
resistance of the circuitry in and characteristics of the 
antenna and the capacitors needed for operation. To 
provide antenna switching time in the microsecond range, 
the DC power to an antenna is preloaded before the RF is 
switched. 

Referring to FIG. 7, in an antenna system 700, the 
combined DC and RF signal arrive through a coaxial cable, 
such as the cable 103a from the cell controller 102a. A 
bias tee 701 separates the RF signal 710 from the DC 
signal 712. The DC signal 712 is sent to Tx/Rx power 
control logic 702 which, in the simplest embodiment is a 
filter to remove noise from the line and provide a clean 
5 volt power source. The RF output 710 from the bias tee 
701 is fed into a diplexer 715, which is identical to the 
diplexer 618 in the cell controller 102a. This is then 
amplified by an amplifier 703 to the power level allowed 
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by the FCC, and filtered by a filter 704 to remove line 
and amplifier noise in compliance with FCC regulations. 
The resulting signal is then sent to a transmit antenna 
705. 

5 The transmit antenna 705 and receive antenna 706 

are, in this embodiment, patch arrays, providing reduced 
energy in the vertical direction and spreading energy 
laterally, so that power is not wasted in the floor and 
ceiling, and so that minimal power is radiated upward. 
10 The 5780-megahertz response 107 from the tag 101a is 

filtered by a filter 707, amplified by an amplifier 708, 
and sent back down the cable 103a to the cell controller 
102a. 

The system is designed to use cables I03a-d of a 
15 standard length, for example, 20 meters. A cable 

extender module 900 connects two lengths of cable and 
supports an extended cable length. Referring to FIG. 9, 
the elements of the module 900 use the DC power 910 from 
the cable 103 to drive low noise amplifiers 903, 904, 
20 which provide enough gain to drive the next section of 

cable. Bias tees 906, 907 separate the DC power 910 from 
the RF signals, and diplexers 908, 909 operate to 
separate the transmit signal 106 from the receive signal 
107. 

25 Referring to FIG. 6, the signal returning from the 

antenna module 104a to the cell controller 102a passes 
through the switch elements 621, 619 and diplexer 618 to 
the cell controller receive RF chain 622. The signal 
passes through a combination of a preamplifier 623 and 

30 bandpass filter 624, the exact arrangement of which 
varies based on the parts selected. A digitally 
controlled receive attenuator 625 under microprocessor 
control 62 6 is used to avoid saturating the receive chain 
when the tag 101a is known to be nearby. This is 

3 5 necessary to avoid losing the relationship between the I 
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and Q components of the received signal 107, necessary 
for proper correlation and other signal processing. 

The signal then enters an I-Q zero IF demodulator 
circuitry 627-633. As noted previously, the 
5 microprocessor Rx frequency control 635 must be set in 
tandem with its counterpart in the transmit chain. The 
resulting signal, an example of which is shown in FIG. 
5E, is fed into a digitizer 636 (FIG. 10) in preparation 
for digital signal processing. 

10 The embodiment described above is simplified, based 

on an assumption that the cell controller can send and 
receive from only one antenna at a given time. Improved 
performance can be achieved by selecting send and receive 
antennas independently of each other. Software in the 

15 cell controller determines which antenna module receives 
the best signal from the tag. For example, if a 
particular tag, such as tag 101a, is close to an antenna, 
such as antenna 104a, then the antenna 104 will receive a 
strong signal from the tag 101a. The cell controller 

2 0 102a can then transmit a signal, such as signal 106, from 
antenna 104a, and receive the transponded response 107 at 
antennas 104b, 104c, and 104d in turn. This can result 
in a stronger signal received at the antennas 104b-d, 
compared to the signal the antennas 104b-d would have 

2 5 received had the signal 106 been transmitted and the 

signal 107 received from each of the antenna modules 
104b-d independently. 

The design 1600 shown in FIG. 14 provides multiple 
receive chains 1610a-1610n operating in parallel. Each 

3 0 of the receive chains 1610a-1610n includes an IQ 

demodulator, a digitizer, and a correlating element, 
shown as integer DSPs, for example, integer DSP 1620. 
Implementing each receive chain on a separate card 
provides scaleability . The use of multiple receive 
3 5 antenna modules for the same transmitted signal allows 
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the cell controller signal processing software to employ 
spatial processing techniques to isolate inultipath 
effects. These techniques take advantage of the fact 
that the multipath-corrupted response will have different 
5 characteristics at each antenna. 

Bit Detection 

In an ideal environment, a simple triangular 
correlation peak can be derived from a received tag 
signal 107, as shown in FIG. 5B. Distortions introduced 

10 in the radio chain, particularly caused by indoor 

multipath effects, result in a distorted but nonetheless 
distinct correlation peak, a function of which is shown 
in FIG. 5G. For the purpose of bit detection, the 
essential point is to reliably detect the existence of a 

15 series of correlations, which indicates the operation of 
a tag. FIG. 11 shows how tag data is extracted from a 
series of correlations. In the left half of the chart 
1110 shown in FIG. Ill, the tag is transmitting a "zero." 
This is accomplished by setting the tag's modulator 307 

20 to pass the interrogator signal 106 unaltered. When the 
received tag signal 107 is correlated with the 
transmitted pseudonoise sequence, essentially identical 
correlation peaks result. Three such peaks 112 0a-c are 
illustrated here. During the time of the fourth 

25 correlation 1120d, the tag flips the phase of the 

modulator by 180 degrees, indicating a "one," as shown in 
the chart 1110. Since the modulation is changed in the 
middle of a bit, the fourth correlation data peak 112 Od 
is corrupted, and is best ignored. The fifth and sixth 

30 correlation peaks 1120e-f cleanly reflect the 180-degree 



Pseudonoise sequences can be varied under 
microprocessor control at the cell controller. When a 
tag's presence is first detected, relatively short 



shift. 
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sequences must be used, as shown in FIG. 11. Once the 
tag's bit timing is ascertained, it is possible to use 
longer sequences for improved SNR, which is helpful in 
distance measurement. 
5 An important consideration, not shown in FIG. 11, is 

that the balance between the Inphase and Quadrature 
components of the received signal will drift over time. 
This is because the 10-megahertz sources in the cell 
controller 102a and the tag 101a will differ typically by 

10 a few kilohertz. This factor can be calibrated by noting 
the phase difference between contiguous correlations, 
detectable at the baseband by noting changes in Inphase 
and/or Quadrature components of the received signal. As 
noted previously, this same calibration process can be 

15 used to calibrate the tag clock in reference to the cell ^ 
controller clock, allowing for precise prediction of tag i 
chirping time, without needing to precisely measure the 
timing of tag bit transitions. 

Interaction Between Cell Controllers and Tags 
2 0 Each tag is a stand-alone unit that is unaware in 

any way of the outside world. Each tag has a Unique 
Identifying Code (UID) associated with the tag when it is 
manufactured. A tag wakes up periodically and, for a 
short, period of time, converts any incoming 2440- 
25 megahertz signal 106 to an outgoing 578 0-megahertz signal 
107, while modulating its UID and other data onto the 
outgoing signal 107 which it chirps (transmits) . The tag 
does not communicate with other tags. The tag does not 
explicitly respond to an interrogation signal, but merely 
30 transponds any incoming signal 106 in the 2 44 0-megahertz 
band, which may or may not include a pseudonoise sequence 
from a nearby cell controller antenna module 104a. This 
approach greatly simplifies the design and fabrication of 
the tag 101a. 
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Some portion of the time, two or more tags will 
transpond simultaneously. In many cases, one of the two 
tags will return a stronger signal than the other tag and 
some data will be lost in such a collision. To avoid 
5 collisions occurring in a repeating pattern, tags "wake 
up" and chirp their UIDs at randomized times, which can 
be calculated (by both the tag and the cell controller) 
based on a pseudorandom number generator which 
incorporates the tag's UID. For example, for a tag which 

10 chirps approximately every 5 seconds, the tag generates 
pseudorandom numbers between 0.0 and 2.0, and adds these 
to a 4.0-second minimum delay time, resulting in a 
sequence of delay times uniformly distributed between 4.0 
and 6 . 0 seconds . 

15 it is possible to use analog inputs, such as an 

input from an internal clock or the delay of an RC 
circuit, to the pseudorandom number generator to vary the 
seed over time, but a purely digital scheme is preferred 
to enable the cell controller 102a to accurately forecast 

20 a known tag's chirping time. A typical pseudorandom 
number generator has the form: 

N = rand (seed) Formula 1 

The resulting N is used as the seed for the next 
pseudorandom number in the pseudorandom number sequence. 

25 When using a pseudorandom number generator of this kind, 
it is possible that two tags will use the same seed, 
resulting in their tag signals repetitively colliding. 
Further, with small differences in tag clocks, all pairs 
of tags will eventually drift through this synchronized 

30 state for some amount of time. To avoid these conditions 
it is desirable to incorporate each tag's UID, as noted 
above, into the delay time for that tag, resulting in a 
different pseudorandom sequence for each tag, that is: 
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Delay = f (N,UID) Formula 2 

One simple example of such a function is: 

Delay = Xor(N, BitRotate (UID, AND (N, 1111 2 ) ) Formula 3 

Referring to Formula 3, it is possible to 
5 reconstruct seed from UID, Delay and And(N f 1111 2 ) , by 
calculating N = Xor (Delay, BitRotate (UID, And(N, 1111 2 ) ) • 

Referring to FIG. 12a, one embodiment of the tag 
datagram 1400 contains a header 1401 to enable the cell 
controller to detect the tag's presence, followed by an 

10 identifier preamble 1402, followed by the tag's UID 1403. 
The header 14 01 can be of zero length. The identifier 
preamble 14 02 can be implemented, for example, as a 
validity check such as a cyclic redundancy check (CRC) . 
Given a sufficiently simple Delay function and high clock 

15 stability, the cell controller can infer the tag's 

chirping sequence by noting the timing of a series of 
chirps of the datagram 1400. 

Referring to FIG. 12b, in another embodiment of the 
tag datagram 1410, the tag adds Delay information 1414, 

2 0 thus enabling the cell controller to forecast the 

transmission time of the tag's next and subsequent chirps 
of the datagram 1410. In the example of Formula 3, this 
information would include the data: Delay and 
And(N, 1111 2 ) . 

2 5 Referring to FIG. 12c, in another embodiment of the 

tag datagram 1420, a shorter header is used than in the 
datagrams 1400, 1410 of FIGS. 12a and 12b, such that the 
cell controller is not guaranteed to have enough time to 
detect the tag's presence before the UID 1423 contained 

3 0 in the tag datagram 14 2 0 is transmitted. Appended to the 

datagram 1420 is the transmission delay 1425 of the next 
chirp, enabling the cell controller to anticipate the 
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time that the tag will next chirp its datagram 1420, even 
if the cell controller does not have enough time to 
identify, the identity of the tag from the first received 
chirp of the datagram 1420. The cell controller can then 
5 anticipate this next chirp and ascertain the identity of 
the tag at that time. Once the tag is identified, the 
cell controller can duplicate the tag's pseudorandom 
number generator to calculate the times of all future 
chirps by the tag. In the tag datagram 1420 of FIG. 12c, 

10 a series of special synchronization bits 1424 are 

inserted between the UID 1423 and the delay information 
1425, to reliably determine when the UID 142 3 ends; in 
this case, the UID 1423 must be defined so that it does 
not include the synchronization sequence or its inverse. 

15 FIGS. 12a, 12b, and 12c include optional data 

sections 1404, 1415, 1426, which allow a tag to transmit 
data to the cell controller. These sections 1404, 1415, 
1426 can include data from within the tag, such as from a 
motion detector or a low power indicator, or from an 

20 external device attached to the tag, such as metabolic 
information for medical telemetry if the tag is attached 

to a person. 

An identifier preamble, related to the tag UID, 
precedes the tag UID. This identifier preamble enables 
25 the cell controller to quickly verify that a tag is 

chirping as expected, without needing to decode the tag's 
complete UID. This frees the cell controller for other 
activities, such as communicating with different tags in 
proximity to other antennas. The identifier preamble 
30 1402, 1412, 1422 and tag UIDs 1403, 1413, 1423 are set 
externally, and if appropriate can be defined to include 
error correction bits. 

The UID of a tag may be hardcoded into the tag 
(e.g., as a serial number). Tags may be grouped based on 
35 their UIDs, and different groups may be associated with 
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different cell controllers. Each cell controller 
contains information (received from another source) about 
which tags are in the group associated with the cell 
controller. When a cell controller receives a tag 
5 signal, the cell controller can extract the UID 

information from the tag signal to determine whether the 
tag signal was sent by a tag in the group associated with 
the cell controller. 

In the tag datagrams 1400, 1410, 1420 of FIGS. 12a- 

10 c, the delay information fields 1414, 1425 and data 

fields 1404, 1415, 1426 can also include error correction 
bits. For simplified processing, data can be reduced to 
a stream of half -bytes. To determine what value to send 
for a particular half -byte, the tag can look up the half- : 

15 byte's value in a table which contains, for example, 8- r- 
bit values, which represent the value of the half -byte 
plus error correction information. A single cell 
controller can handle all three types of datagrams 14 00, 
1410, 142 0 shown in FIGS. 12a-c. The choice of datagram 

2 0 type would depend on the application requirements for a 
particular tag. 

The amount of time it takes for a cell controller to 
detect the presence of a tag may vary depending on the 
nature of the cell controller design. For example, a 

2 5 100-microsecond time to switch antennas may be 

significant when the cell controller is cycling among 16 
antennas. In order to be assured that a tag will be 
identified the first time its tag signal is received by 
the cell controller, the tag datagram header must be long 

3 0 enough to give the cell controller time to try all of its 

antennas. If the performance requirement is in the range 
of 100 tags per second, 2 or 3 extra milliseconds in the 
header can be tolerated. But for higher performance 
requirements, or when tag power consumption must be 
3 5 minimized, it is necessary to either improve the 
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performance of the cell controller or to use a tag 
datagram 1420 of the type shown in FIG. 12c. 

By anticipating time of transmission from a 
particular tag, the cell controller can collect tag 
5 information from a variety of antennas in an organized 
way, in order to better calculate tag location by using 
antenna and/ or frequency diversity- If a tag is 
responding exactly when it is expected to respond, it is 
not necessary for a cell controller to detect every bit 

10 transmitted in the tag datagram in order to be reasonably 
certain that it is receiving a signal from the correct 
tag. A correct identifier preamble arriving exactly on 
schedule is almost certain to be from the expected tag. 
This provides an opportunity for the cell controller to 

15 try a variety of antennas that may or may not be able to 
communicate with the tag. 

If it is necessary to track tags between the tag 
datagram transmissions, the tag can be configured to send 
shorter transmissions more frequently. For example, if a 

2 0 tag is configured to chirp its datagram on average every 

10 seconds, it may also be configured to transmit a much 
shorter code more frequently, such as every half -second. 
This shorter code might be as short as one bit long, and 
take just a few microseconds to transmit. Thus, even 
25 hundreds of such transmissions per second would consume 
only a small percentage of the communication channel. 
The cell controller can anticipate the exact timing of 
each such transmission, thus matching each signal with 
the originating tag based on the time of the 

3 0 transmission. Error correction codes can be arranged 

such that long chirps from one tag will not typically be 
corrupted by quick chirps from other tags. The cell 
controller has the data to forecast most of such 
collisions. 
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When a tag is first introduced into a cell 
controller's range, collisions between datagram 
transmissions of different tags will occur in an 
unpredictable way. Transmission by a tag newly 
5 introduced into the area, or by a tag which spontaneously 
increases its transmission rate (such as in response to a 
motion detector or "panic button") , cannot be forecast by 
the cell controller 102a, and might cause data 
corruption. However, once the tag is identified, 

10 previous collisions can be modeled and questionable data 
discarded. Alternatively, if signals from two tags 
collide, the cell controller can select an antenna such 
that the signal the antenna receives from one tag will be 
stronger than the signal the antenna receives from the 

15 other tag. 

In a more advanced tag design, the cell controller 
has a means for sending information and instructions to 
the tag during the times that the tag is known by the 
cell controller to be in operation. Such instructions 

2 0 can include commands to be passed on to a device attached 

to the tag. The cell controller is capable of 
downloading such, information, most simply by on-off 
keying, or for more advanced tags by flipping the 
pseudonoise bit sequences to indicate one or zero. In 
25 general, the downlink (downloading) approach is driven by 
tag cost and feature requirements, with higher bit 
downlink transmission rates requiring more expensive 
receivers that consume more power. Thus, a single cell 
controller can support read-only tags, read/write tags, 

3 0 and high-speed read/ write tags simultaneously, with the 

cell controller adapting its behavior depending on the 
features supported in a particular tag. 

Timing of transmission from tag to cell controller 
depends on the item being tagged. Inventory and 
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equipment can be set to transmit relatively infrequently, 
such as once per minute. More frequent transmissions 
would be required, for example, for tags on people in a 
secure facility. For read/write versions of tags, timing 
5 of transmission could be modified on command from the 
cell controller. 

Alternative tag designs enable variation in 
transmission time based on environmental factors. For 
example, motion detectors may be placed in a tag to 

10 decrease the time between transmissions when the tag is 
in motion. As another example, a tag might transmit more 
frequently and with higher power when the tag has been 
tampered with. As another example, a tag might 
incorporate a slightly modified Electronic Article 

15 Surveillance (EAS) device, which would cause the tag to 
transmit its UID more frequently when in range of a 
standard EAS detector. More generally, if a tag is 
attached to another electronic device, transmission 
interval can be modified under the control of that 

2 0 device. 

Tag Power 

Tags lOla-c transmit a low RF power level in order 
to increase their portability and lifespan. In addition, 
tag signal transmissions 107 are designed to be only a 
25 few milliseconds in duration. Therefore, even if a tag 
transponds its UID every few seconds, careful tag design 
allows the battery life of the tag to approximate the 
shelf life of the battery itself. For even lower power 
usage, a motion detector can be incorporated into the tag 

3 0 so that, for example, transmissions can be less frequent 

when the tag is stationary. 

For some situations, battery replacement may be 
accomplished by incorporating the battery in an 
attachment mechanism. For example, re-usable tag 
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electronics may be attached to a disposable patient 
bracelet, with the battery included in the bracelet. As 
another example, a battery may be incorporated into the 
clip of an ID bracelet. More generally, a battery may be 
5 incorporated into an inexpensive disposable portion of an 
active RFID tag, with the electronics in the other, more 
expensive, portion. 

If the item to which a tag is attached is a power 
source itself, the tag could tap into that power source. 
10 This approach is most practical in situations where the 
tag can be designed into the equipment itself (such as a 
handheld computer) , or where the equipment and power 
source are large (such as a forklift) . A larger power 
source allows for longer tag range. 

15 Estimating Tag Location 

A tag signal 107 is received at a time that is the 
sum of (1) known fixed delays in the cell controller 102a 
that transmitted the interrogator signal 106, due to its 
circuitry and the wiring to and from its antenna modules 

20 104a-d, (2) fixed time delays in the antenna module 104a 
and tag 101a, and (3) the time for the interrogator 
signal 106 and tag signal 107 to travel through the air. 

Since (1) and (2) are fixed, attention can now be 
turned to (3), the travel time of the interrogator signal 

25 106 and tag signal 107 through the air. The duration of 
the pseudonoise sequence modulated onto the 2 4 40MHz 
carrier signal 106 by the cell controller 102a must be 
greater than the combined travel time of the signal 106 
and the tag signal 107. Techniques for correlating a 

30 pseudonoise sequence are well known in the art. In the 
absence of multipath effects, the cell controller 102a 
can derive a simple triangular correlation peak from the 
received tag signal 107, as shown in FIG. 5B. But in 
most indoor environments, the actual received tag signal 
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looks more like that shown in FIGS. 5D-5G. Indoor radio 
signals are subject to substantial irtultipath effects, due 
to reflection from a variety of surfaces, such as 
whiteboards, fluorescent lights, file cabinets, elevator 
5 shafts, steel beams, and the like. When a tag 101a 
transmits a tag signal 107, the sum of the direct tag 
signal 107 and reflected signals is received at the cell 
controller antenna module 104a. A variety of approaches 
can be employed in order to extract a correlation peak 

10 from such information, with the particular approach 
chosen depending on the available signal quality, 
processing power, and required performance. 

A 4 0-megahertz chip rate results in a correlation 
peak with a rise time of 25 nanoseconds, corresponding to 

15 a rise time distance of about 25 feet. Since tag 

location is calculated using round-trip travel time, 
single-chip accuracy therefore allows tag distance to be 
calculated within about 12 feet, without any advanced 
signal processing. 

2 0 Approximate location of a tag can be calculated by 

noting when correlated signal-to-noise ratio rises above 
a predefined level. Improved accuracy can be achieved by 
trying a small variety of carrier frequencies and 
choosing the one that rises the earliest; such frequency 
25 diversity is supported by the radio system shown in FIGS. 
4-6. This approach is sensitive to the system signal-to- 
noise ratio. 

An alternative approach finds the peak of the 
correlation function. For an improved result, the signal 

3 0 delay is measured by taking the negative of the cross- 

correlation function's second derivative and finding the 
location of its peak, as shown in FIG. 5G. 

For highest accuracy, the MUSIC algorithm, known to 
those in this field, can be used, for which accuracy in 
35 the 0.01 chip range has been reported. MUSIC requires 
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frequency diversity, which is supported by the radio 
system herein disclosed and shown in FIG. 6. The method 
is based on a decomposition of the eigenvector space of 
the pseudonoise correlation matrix of the delay profile 
5 data vector. Frequency diversity is required, where each 
distinct frequency provides the information to solve for 
an additional multipath component. For tags that are 
mostly stationary, necessary data can be collected and 
the calculation completed as a background process. For 

10 inventory applications, motion detectors can be 

incorporated into the tag, which would then inform the 
cell controllers whenever their locations need to be 
recalculated. 

In situations where adequate data collection time, 

15 antenna diversity, frequency diversity, or processing 
power are not available, a variety of heuristic 
techniques can be used to calculate tag location, even in 
the presence of severe multipath effects. A variety of 
techniques well-known in the art can be used to estimate 

20 bearing to each antenna, which can be employed as 
required. 

In many circumstances, although precise accuracy in 
calculating tag location is not required, it may still be 
important to calculate tag location with reference to a 

2 5 floor, or partition. Story-by-story discrimination in a 

building can be accomplished by mounting antennas in the 
ceiling that radiate downward (or antennas in the floor 
that radiate upward), as shown in FIG. 2. Similarly, 
antennas mounted sideways on horizontal partitions can 

3 0 determine location relative to those partitions. 

Relatively narrow beamwidth antennas, which are less 
sensitive to multipath effects, can be directed at 
doorways and the like. 

A cell controller antenna 104a can be mounted near a 
35 computer screen, with coverage corresponding to viewing 
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angle of the screen. Software can then be arranged to 
automatically configure the operating system for the 
person in range, or to blank the screen for security 
purposes depending on who is or is not in range. Similar 
5 concepts can be used in conjunction with copying 

machines, microfilm readers, restricted equipment, and 
the like. 

A single antenna module can include three separate 
antennas placed in a triangle. By comparing phase 

10 difference using the Inphase and Quadrature components of 
the returning signal, an indication of the tag's angle 
can be determined. In high frequency embodiments, such 
as at 2.4 5 gigahertz, such antennas could be within 
inches of each other and be quite effective. 

15 Heuristic techniques can be used to analyze the 

correlation profile to estimate the time at which the 
correlation began, that is, the time at which the 
correlation peak begins to be distinguishable from the 
"noise" baseline. Frequency diversity can provide a 

20 variety of samples, the best of which can be chosen. 
Improved estimates can be achieved by pattern matching 
the correlation peak with one of a vocabulary of well- 
studied typical correlation profiles. For calibration 
purposes, tags can be placed at known fixed locations, 

25 and tags passing near those locations will likely 

demonstrate similar correlation profiles. Such fixed 
tags can also be utilized to detect the presence of 
jammers (objects which emit, intentionally or 
unintentionally, interfering signals) and to provide a 

3 0 real-time testbed for trying a variety of antijamming 
techniques. 

Antenna diversity is the most important tool for 
improving the accuracy of tag location calculation. If 
low accuracy is required, antennas can be placed so that 
35 only one or two antennas are in range of a given tag. Ir 
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this case there is insufficient data for triangulation, 
and only enough information to detect tag presence and 
estimate tag distance from one or two antennas at any one 
time. Approximate bearing of a tag can be estimated from 
5 the signal strength of antennas designed for the purpose 
and well-known to those skilled in the art; with the 
caveat that such bearing tends to reflect the strongest 
signal received, which might include a substantial 
multipath component. Conversely, for areas requiring 

10 high accuracy, a diversity of relatively narrow beamwidth 
antennas can be installed, for example, at entrances, 
which together provide a clear picture of location. 

Antenna diversity also provides system scaleability . 
For other facilities, or sections within facilities, that •* 

15 do not require calculation of tag location with high v*- 
accuracy, substantially omnidirectional and/or ceiling * 
mounted antennas can be installed relatively far from 
each other, for a relatively low cost per square foot of 
coverage. For facilities, or sections within facilities, 

2 0 that require high positional accuracy, a diversity of 
closely-spaced and/ or directional antennas can provide 
high accuracy at an increased cost. 

Cell Controller Operation 

The design of the overall system, and the fact that 

2 5 the intervals between tag signal transmissions are 

generated pseudo-randomly , provide an opportunity for 
secure operation. Tags dispersed at the entrance of a 
secure facility can be tracked through that facility and 
a special code can be emitted when the tag is tampered 

3 0 with. Although the tag's code can be determined by 

monitoring the tag's response, the tag's transmission 
interval varies according to an algorithm that can be 
arranged to be known only to the tag and the host, and 
impossible to directly determine without destroying the 
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tag. The tag may for example, include an element, such 
as a physical element, for reprogramming its code and 
transmission interval. For example, a photo ID with an 
incorporated tag might be reprogrammed each time the 
5 person wearing the photo ID passes a security checkpoint, 
potentially in conjunction with biometrics technology. 

For full coverage of a facility, multiple cell 
controllers can be installed, covering somewhat 
overlapping areas. Although each cell controller will be 

10 operating according to a search and data collection 

method, rapid movement between antennas, the pseudonoise 
code, the changing chipping rate, and so forth, will 
appear as random noise to another cell controller. In 
addition, codes with known cross-correlation 

15 characteristics, such as Gold Codes, can be allocated to 
various cell controllers by the host computer, 
particularly the codes used to search for tags. 
Alternatively, cell controllers can switch choice of 
pseudonoise codes on a randomized basis. 

20 For tags on the border between two cell controllers, 

each cell controller reports the tag's distances from its 
antenna modules. The central host 105 assembles this 
data to calculate the tag's location. 

A variety of pseudonoise codes are available for use 

25 by a cell controller. Thus, if one code seems to be 

receiving interference from other users of the spectrum, 
the cell controller can choose another code. The tag, 
being in essence a transponder, does not need to know the 
particular code being used. Likewise, center frequency 

30 can be adjusted somewhat if another user is causing 
difficulty. 

Other embodiments are within the scope of the 
following claims. For example, the order of performing 
steps of the invention may be changed by those practiced 
35 in the field and still achieve desirable results. 
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What is claimed is: 

1. A tag for transponding a radio frequency 
interrogator signal , comprising : 

a receiver for receiving the interrogator signal at 
a first frequency; 

a frequency mixer for generating from the received 
interrogator signal a radio frequency transmit signal at 
a second frequency; 

a microprocessor for generating a tag-specific data 
signal; 

a modulator for modulating the tag data signal onto 
the transmit signal to generate a first tag signal; and 

a transmitter for transmitting the first tag signal 
at selected times. 

2. A tag for transponding a radio frequency 
interrogator signal , comprising: 

a receiver for receiving the interrogator signal at 
a first frequency; 

a time delay for generating from the received 
interrogator signal a radio frequency transmit signal; 

a microprocessor for generating a tag-specific data 
signal; 

a modulator for modulating the tag data signal onto 
the transmit signal to generate a first tag signal; and 

a transmitter for transmitting the first tag signal 
at selected times. 
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3. A tag for transponding a radio frequency 
interrogator signal, comprising: 

a receiver for receiving the interrogator signal at 
a first frequency; 
5 a signal transmission discriminator for generating 

from the received interrogator signal a radio frequency 
transmit signal, able to be discriminated, at the 
interrogator, from the interrogator signal; 

a microprocessor for generating a tag-specific data 

10 signal ; 

a modulator for modulating the tag data signal onto 
the transmit signal to generate a first tag signal; and 

a transmitter for transmitting the first tag signal 
at selected times. 

15 4. The tag of claim 3, wherein: 

the signal transmission discriminator is a frequency 

mixer . 

5. The tag of claim 3, wherein: 

the signal transmission discriminator is a time 

20 delay. 

6. The tag of claim 3, wherein: 

the selected times are generated pseudorandomly . 

7. The tag of claim 3, wherein: 

a difference between two of the selected times is a 
2 5 function of the contents of the tag data signal. 

8. The tag of claim 3, wherein: 

the tag data signal uniquely identifies the tag. 
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9. The tag of claim 3, wherein: 

the tag data signal comprises a header and a unique 
tag identifier. 

10. The tag of claim 8, further wherein: 

5 the tag data signal includes a validity check. 

11. The tag of claim 8, wherein: 

the tag data signal additionally includes error 
correction bits. 

12. The tag of claim 8, wherein: 

10 the tag data signal includes data derived from an 

object associated with the tag. 

13. The tag of claim 8, wherein: 

the tag is in a low power state between consecutive 
transmissions of first tag signals. 

15 14. The tag of claim 9, further wherein: 

said microprocessor, in response to a user input, 
changes the unique tag identifier. 

15. The tag of claim 4, further wherein: 

said microprocessor changes the selected times in 
20 response to user input. 

16. The tag of claim 4, wherein said modulator 
comprises: 

a modulator for modulating said transmit signal 
using on/off keyed modulation. 
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17. The tag of claim 4, wherein said modulator 
comprises: 

a modulator for modulating using binary phase-shift 
keyed modulation* 

5 18. The tag of claim 4, wherein said modulator 
comprises: 

a modulator for modulating using multiple phase- 
shift keyed modulation, 

19. The tag of claim 4, wherein said modulator 
10 comprises: 

a modulator for modulating using quadrature 

amplified modulation. 

20. The tag of claim 7, further comprising: 

said microprocessor causing a second tag signal to 
15 be transmitted periodically. 



21. The tag of claim 4, wherein: 

the tag receives and responds to multiple 
interrogator signals simultaneously. 
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22. A method for estimating the location of an object, 
comprising the steps of: 

transmitting an interrogator signal; 
receiving said transmitted interrogator signal; 
transmitting a tag signal from a tag associated with 
the object; 

receiving the transmitted tag signal at at least one 
reception antenna, the transmitted tag signal being 
received at a respective reception antenna at a reception 
time for that reception antenna; 

deriving the identity of a tag from the tag signal 
received at at least one of the reception antennas; 

estimating the location of the tag as a function of 
the locations of a subset of the reception antennas 
receiving the tag signal and of the reception times of 
the tag signal at the subset of reception antennas. 

23. The method of claim 22, wherein receiving the tag 
signal comprises the steps of: 

for each antenna among a set of at least one 

2 0 antenna, determining whether the antenna is receiving a 

tag signal: and 

if the antenna is receiving a tag signal, 
identifying the antenna as a reception antenna for that 
tag signal. 

25 24. The method of claim 22, said transmitting step 
further comprises the steps of: 

modulating a pseudo-noise sequence onto a carrier 
signal for generating said interrogator signal; and 
extending the pseudo-noise sequence after 

3 0 identifying the antenna as a reception antenna for the 

tag signal. 
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25. A method for estimating the location of an object, 
comprising the steps of: 

transmitting an interrogator signal at a 
transmission time; 

receiving said transmitted interrogator signal; 

transmitting a tag signal from a tag associated with 
the object; 

receiving the transmitted tag signal at at least one 
reception antenna, the transmitted tag signal being 
received at a respective reception antenna at a reception 
time for that reception antenna; 

deriving the identity of a tag from the tag signal 
received at at least one of the reception antennas; 

at a cell controller, determining a distance from 
each of the reception antennas to the tag based on the 
transmission time and the reception time of that 
reception antenna; and 

estimating the location of the tag as a function of 
the distances from a subset of the reception antennas to 
the tag. 

26. A method for detecting the presence of a tag, 
comprising the steps of: 

at a cell controller, continuously transmitting a 
first signal at a first frequency; 

at the tag, receiving the first signal and 
transponding the first signal, at selected times, at a 
second frequency as a second signal; 

at the cell controller, receiving the second signal; 

and 

at the cell controller, detecting the presence of 
the tag based on the receipt of the second signal. 
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27. A method for measuring the distance from an antenna 
to a tag, comprising the steps of: 

at the antenna, transmitting a pseudonoise sequence 
on a first signal at a first frequency at a transmission 
time; 

at the tag, receiving the first signal and 
transponding the first signal at a second frequency as a 
second signal; 

at the antenna, receiving the second signal at a 
receipt time; and 

at a cell controller, determining a distance from 
the antenna to the tag based on the transmission time and 
the rece ipt time . 

28. A cell controller, comprising: r 
an antenna for transmitting a cell controller signal « 

on a first frequency and for receiving a tag signal from 
a transponding tag on a second frequency; 

a quadrature demodulator for extracting the inphase 
and quadrature components of the received tag signal; and 

digitizing the inphase and quadrature components for 
subsequent processing. 
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29. A cell controller, comprising: 

circuitry for transmitting a cell controller signal 



modulated onto a carrier signal; 

circuitry for receiving a tag signal transmitted at 
5 selected times by a tag. 

30. The cell controller of claim 29, further comprising: 
circuitry for determining, from the received tag 

signal, the identity of the tag. 

31. The cell controller of claim 30, further comprising: 
10 circuitry for determining, from the received tag 

signal, the time at which the tag will next transmit a 
tag signal . 

32. A system for monitoring the location of objects, 
comprising: 

!5 at least one cell controller unit connected to at 

least one transmission antenna for transmitting a cell 
controller signal modulated onto a carrier signal at a 
first frequency and at a selected transmission time, and 
connected to at least one reception antenna for receiving 

20 a responding tag signal containing a tag datagram at a 
second frequency and at a reception time; 

at least one tag unit having a translation circuitry 
for translating each received cell controller signal into 
the tag signal; 

25 at least one calculation unit connected to each cell 

controller for calculating the location of each tag unit 
based on the reception time at at least one reception 
antenna . 



33. The system of claim 31, wherein: 
30 the cell controller is configurable to be connected 

to a variable number of additional antennas. 
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34. A system for monitoring the location of objects, 
wherein: 

at least one reception antenna connected to a cell 
controller is mounted near a piece of equipment; 
5 the cell controller is configured to modify the 

operating characteristics of the piece of equipment based 
on the identity of a responding object near said piece of 
equipment. 

35. The system of claim 34, wherein: 

10 the reception antenna is mounted near a computer 

screen so that the reception antenna's input is directed 
at the computer screen's field of vision. 

36. A system for monitoring the location of objects, 
comprising: 

15 at least one cell controller unit connected to at 

least one antenna module for continuously transmitting a 
cell controller signal and for receiving a tag signal; 

at least one tag unit for receiving the cell 
controller signal, for translating the received cell 

20 controller signal into the tag signal, and for 
transmitting the tag signal at selected times; 

at least one calculation unit connected to each cell 
controller unit for determining the location of each tag 
unit based on the received tag signals, and for storing 

25 information derived from the received tag signals in a 
computer-readable storage medium. 

37. The system of claim 36, further comprising: 
tag units located at known fixed locations for 

performing system calibration. 
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38. A method for calibrating a tag clock of a tag in < 
system for monitoring the location of objects, 
comprising: 

separating a tag signal transmitted by a tag into 
5 inphase and quadrature components; 

repeatedly correlating the inphase and quadrature 
components with a pseudonoise sequence; 

determining a phase difference between successive 
correlations; 

.0 calibrating the tag clock based on the phase 

difference. 
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